The following table shows the different roles a user can have along with the permissions in those roles include. Permissions are additive so if a user has two roles and one role has that permission and the other does not the user still has that permission.
Manage Contracts
The difference between the manage contracts values and manage contract no values permission is that the no values permission cannot see the contract values but they can create or update a contract if they need to do so for the registrations process.
Security Role
The Security Role offers a limited view of the workforce directory in the case contracted security teams are given accounts to perform access control activities. This role can view worker profiles, but can only see the "tags" tab which displays currently-assigned badges.